sungwy commented on code in PR #17332:
URL: https://github.com/apache/iceberg/pull/17332#discussion_r3915895667
##########
open-api/rest-catalog-open-api.yaml:
##########
@@ -1429,6 +1429,67 @@ paths:
5XX:
$ref: '#/components/responses/ServerErrorResponse'
+ /v1/{prefix}/namespaces/{namespace}/tables/{table}/presign:
Review Comment:
I've given this more thought, and I think it would be helpful for the client
to be able to express to the server which mode of signing (signed URLs vs
remote signed headers) it is asking for at the time of the request. If both are
generated through a single endpoint, the server would need to determine at
request time which mode the client wants.
I'm thinking of a use case where the client uses remote signing to read the
table and its data files, then makes follow-up requests for pre-signed URLs
covering a different set of files, where the consumer that ultimately fetches
them isn't the Iceberg client. `X-Iceberg-Access-Delegation` is sent at
loadTable, so it can't vary per request, which means a client doing both would
need the distinction made explicit somewhere in the request itself.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
